Comodo BOClean 4.26 out now

Hi guys

Comodo BOClean 4.26 is out


Changes in Version 4.26

General:
Changes to code for Vista SP1 and XP SP3 compatibility

Fixes and enhancements to Excluder:
Fixed incorrect saving/disappearing of icons for excluded programs
Fixed "always on top" problem which sometimes obscured display screen
Quicker access to excluder upon warning of changed or missing excluded item
Better explanation of why excluded item may have changed and instructions
Now remembers display mode and any sorting of display in excluder
Restart of BOClean no longer required after changes in excluder

Fixes and enhancements in manual and automatic updater:
Fixed memory leak which caused BOClean hang after a few weeks continuous use
WEB downloading instead of FTP to resolve firewall connectivity problems
Removed "rollback" button with automatic re-download if download is corrupted
Added new tray bar icon status indications (downloading/success/problem)
Added detailed messages to manual updater notifying of problems and solutions
Downloads automatically checked upon downloading rather than at load time

Fixes and enhancements to BOClean itself:
Faster access to excluder and manual update checking
Clearer, more specific alert messages and recommended actions
Detected items must be either deleted or excluded or BOClean will re-detect
Status icons for updater now visible on traybar when automatic updates occur
Spread scanning to reduce CPU spiking with NAV/KAV/NOD32 antiviruses

Fixes and enhancements to BOClean installer:
Clarified first screen to indicate need for "clean install" and instructions
Automatically sets requirements for administrator mode and installs or complains
Permissions for databases, reports and configuration automatically established
Uninstall now configured to require administrator permission to remove all


Download : http://www.comodo.com/boclean/CBO_download.html


Greetz, Red.

EC edit: Changed direct file link to download page.

 

Just downloaded it and now the auto-update doesn't work. Lovely.

 

Thanks Red. It seems to be working fine here so far.

 

Working fine here. Remember to uninstall old one first and check the Boclean folder in your program files as it appears to still be leaving the BOCore.exe file behind, or at least it did on 2 boxes here.

 

- Drew99GT

I already answered you at Comodo forums


- strangequark

Did you shut down BOClean before you uninstalled it ?


Greetz, Red.

 

yes as I always have, did you check to see if you had BOCore.exe in the Bolclean folder.

 

Lol, I didn't notice your post on Comodo forums

But yes, I always check such things and on both my machines the BOClean folder was completely deleted.

Greetz, Red.

 

Red we'll have to stop meeting like this

had this happen when I went from 4.24 > 4.25, so just check out of habit. Interesting yours was completely gone, I have to go and update a couple of computers around the area today, so it will be interesting to see what happens.
No problem, all is working fine, actually I'll do a check in a couple of virtual machines right now and post the outcome.

update: 2 virtual machines > XP no BOCore.exe left over, Vista the file was still there.

 

A few additional notes:

1.
Official announcement here at the Comodo forum:
http://forums.comodo.com/announcements/boc_426_released-t21896.0.html

2.
This version is called: 4.26.001

3.
The download site is:
http://www.comodo.com/boclean/CBO_download.html

Please follow the instructions there for upgrading/installing.

MD5 and SHA1 HASHES are posted there for the installation file.
File Name: CBO_Setup_4.26.exe
MD5: 129c280dac67c4f4113c1c79e9e5bfa1
SHA1: 7d7326a95d33b4b989c51ab070a3272a5722c5da

4.
Some interesting threads at the Comodo forum where Kevin posted about the new version:

4-a.

http://forums.comodo.com/comodo_boclean_antimalware/any_date_for_a_new_version_yet-t21368.0.html

4-b.

http://forums.comodo.com/comodo_boclean_antimalware/automatic_updates_error_with_426-t21877.0.html

(in that thread Kevin posted some error messages and their meaning)

4-c.
http://forums.comodo.com/comodo_boc...s_file_wo_connecting_to_the_net-t21821.0.html

5.
An important change has been made with respect on how definition updates are acquired now:
In the past it has always been through (passive) FTP.
With this new version it is now through HTTP.

This might mean that you have to look at your software firewall rules !!!

6.
For those interested:
RejZor has given new tray icons for version 4.26.
See here:
http://forums.comodo.com/comodo_boclean_antimalware/new_tray_icons_for_version_426-t21887.0.html

7.
For the NOD32 users:

In the past we used to exclude the BOClean files in AMON.
At the moment I am still at NOD32 version 2.70.39 so I don't know how things are in NOD32 version 3.

Anyway, if you had the BOClean files excluded in AMON, don't forget to make a few changes; in particular these ones:
C:\Program Files\Comodo\CBOClean\BOC426.EXE
C:\PROGRA~1\Comodo\CBOClean\BOC426.EXE

 

Unable to reach the download link. I guess everyones busy downloading

 

Same here,it stalls on clicking the download link.

 

Thanks for reporting this. Alternative download links on MajorGeeks :

http://www.majorgeeks.com/Comodo_BOClean_Anti-Malware_d5616.html

Greetz, Red.

 

Question Plz:

What can BoClean do exactly to improve security for a system that uses a combination of at least no more than 3 of the apps you find below in my signature which could be of real benefit?

Is it neccessary or another layer of protection and how responsive is it to memory intrusions of a malicious nature that a HIPS couldn't handle.

Thanks EASTER

 

Most people think that the more "stuff" you have running, the better the security, but I think that sooner or later, it just gets "silly". I had been using BOC since version 4.08 and I can only remember it tagging one trojan, interestingly just before Avast flagged it.
I had abandoned BOC after Comodo took over, not because of that, but I felt that it really wasn't necessary (I am on dial up, don't ask, damn country living) and I found having another updating program was a PITA.
Interestingly, you and I have stumbled onto much more interesting security ideas, such as, SuRun and SRP for example.
I think that dedicated AT software is just not needed anymore, especially with all the "stuff" we all tend to have running nowadays.

YMMV Colin

 

But BoClean isn't only about trojans anymore. read the information that is available at the Comodo website. It's anti-malware.

 

Yes Boclean is residential and a poller admit that, but its so small on resources . IMO is has the right philosophy in that malicious stuff that lay dormant and inactive is harmless,the moment it shows its true colors in registry or/and memory it will be killed flat by Boclean.
As you know many malware sits on disks,repacked,compresses,rehexed etc. to evade detection by scanners and their sucsess rate is disputable,but once they start they have to show up in memory and show their real intentions,at that moment Boclean will interupt their behavior and kills them on the spot.

You can say this is just theory but 3 weeks ago after my weekly manual scans with SAS and Cureit they found nothing,right thereafter Boclean fired up and detected an very legetimate Trojan in memory and killed it.

 

Your AV is anti-malware too

I'm more than skeptical on BOClean's suposed abilities at dealing with obfuscated code (i.e. being a true memory scanner).

Did you investigate any further?

 

Does BoClean show in Vista Security Center?

 

All I am using for security right now is Boclean, Defensewall and Returnil. I have taken Boclean for several test runs thru the dark side and it has lived up to its hype.

 

What is BOClean's memory usage nowadays?

 

Ok Thanks colinp

Good to read your feedback and i must admire the honesty in your opinions, and i also have to agree the Limited User approach in the form of SuRun/SRP are already more interesting and readily available methods to help tighten matters up for that extra quality safe protection.

EASTER

 

Anyone can explain me what the colours on the icon means?
It can get black, green, red and blue!

Red is when I open the menu.
Blue is when it updates I think.
Black and green? (most of the time it's black, it just flashes green)

 

I guess it's just an "activity reminder", like the spinning icon from avast. You can disable it in the menu, and then it stays black all the time (at least on version 4.25)

 

Thank you!

Ok this seems a very nice product, it occupies 0.7 mb in Program Files folder and it doesn't bother me a bit while I am surfing.

 

Can you open task manager and see how much memory it uses?
in 4.25 there were 2 processes boc425.exe and bocore.exe